Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
File:                     1-n6xEVEw-slAkQYeMUYqVlImiFo.mft (raw, json)
Hash identifier:          URzMjtrodSpcC8/NL/VFKCnlL7KANqmjfDvo1jOVKcs=
Subject key identifier:   45:4B:6C:9C:FF:0B:99:E0:89:91:62:1E:22:32:1D:79:BA:FB:6B:79
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Certificate issuer:       /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial:       01935199836E6ECF92EF014E768AB04B3CA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
Manifest number:          0855
Signing time:             Fri 22 Nov 2024 02:00:35 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:35 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:35 +0000
Files and hashes:         1: 1-n6xEVEw-slAkQYeMUYqVlImiFo.crl (hash: ZAJesoUntGGuMklzELZ4DO1/Zr6kpC9LKCTUvc1r+hA=)
                          2: QxqYVPfAsE-57qCkcB06Rd4fymU.roa (hash: dFoLKFXLMTu6Y8MtUD8SB8ObcfHEf/xTdKt12W5GL7w=)
                          3: v_7J5B_orAg2-yE4Ot8HtPcymDo.roa (hash: 6Aw06VcPSN9ocbZNierh6T8kzFGNRXmYy8B1a5/oZVI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:83:6e:6e:cf:92:ef:01:4e:76:8a:b0:4b:3c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
        Validity
            Not Before: Nov 22 02:00:35 2024 GMT
            Not After : Nov 23 02:00:35 2024 GMT
        Subject: CN=454b6c9cff0b99e08991621e22321d79bafb6b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:46:54:a4:d0:f5:1b:7b:91:42:2e:bd:6f:c6:
                    67:da:8b:b8:ab:82:42:55:a9:68:3b:3f:eb:f8:f9:
                    1f:93:dd:b3:5d:3b:31:06:07:24:34:1e:d2:39:73:
                    21:3d:f9:69:fe:4a:16:f0:37:26:e0:7e:fe:cb:f0:
                    35:6e:57:ea:67:41:ea:9e:29:3d:b5:aa:87:f2:7c:
                    0a:7d:a2:6b:1b:0a:3e:f6:99:fb:d0:b6:33:e0:90:
                    92:eb:ef:ec:58:22:e2:4a:2e:61:8d:aa:b5:bb:f0:
                    83:a9:98:f8:a5:1e:5b:94:8e:38:87:61:bf:4c:5c:
                    70:a9:be:ab:55:f8:8e:4e:c9:4f:c2:52:bc:aa:8a:
                    fe:6f:df:a9:81:3d:32:a3:c2:ca:52:00:c4:a8:76:
                    8b:03:37:f7:89:d4:70:be:93:21:88:d9:e6:fd:c9:
                    04:0a:b2:96:62:f4:8d:9a:5e:03:e3:fe:82:3e:fb:
                    c5:67:96:7d:7f:06:53:19:51:85:f0:c2:6a:ab:f0:
                    08:1a:00:42:44:ca:ce:01:cc:3b:3b:f2:a3:86:3b:
                    72:33:8d:ae:8c:27:39:17:23:04:ad:0d:2e:ae:e0:
                    15:77:ea:85:b6:78:f1:fb:1d:b5:dc:68:7e:35:a0:
                    7e:b4:2f:4d:5c:a9:08:5d:6d:b2:e1:d9:e1:71:0a:
                    3a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4B:6C:9C:FF:0B:99:E0:89:91:62:1E:22:32:1D:79:BA:FB:6B:79
            X509v3 Authority Key Identifier:
                keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a6:31:c2:4c:33:0b:0e:4e:60:2b:ea:e6:4f:ef:8d:83:61:
         70:cc:95:59:91:cb:d1:b4:18:48:65:6e:6d:49:29:d8:83:d8:
         03:94:6b:5c:cc:b4:43:29:91:1f:54:01:f7:01:30:db:b8:0a:
         f0:65:b4:fd:12:5d:56:59:f2:e7:7f:60:e4:93:2d:99:ad:c9:
         e1:5d:1e:98:06:af:7f:70:17:a1:1d:a8:37:5d:8b:a0:e2:e5:
         03:00:92:60:a6:84:3f:d5:74:16:42:14:2d:19:64:e2:d5:39:
         65:8c:b8:03:c3:38:c3:e0:48:09:32:70:19:4c:bb:89:c3:97:
         ba:8e:6a:c5:ac:82:0e:94:2a:7a:d1:13:b2:13:dd:02:4c:a7:
         99:61:33:b0:e8:eb:9e:ee:70:ec:0d:23:b7:ab:3f:6a:c0:e7:
         27:5f:d2:65:32:38:14:6f:58:df:e0:27:dc:c8:41:a8:b4:c1:
         ea:ba:1e:82:4b:bb:98:c9:b3:2a:2d:32:0c:c8:41:c2:74:c4:
         09:28:d6:16:a3:a0:e5:a8:14:41:eb:d7:9a:22:5e:de:e3:1d:
         6d:10:7a:b1:c2:09:8b:d5:21:3a:27:22:5d:69:f9:2c:73:44:
         10:48:ca:6f:96:a8:f6:61:a2:6b:03:c8:05:7c:61:15:d4:4f:
         5f:0d:de:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:08:06 2024 by rpki-client on console-fra.rpki-client.org